Data Compatibility with CA Identity Manager

Connector for CA Identity Manager › Overview › Data Compatibility with CA Identity Manager

Data Compatibility with CA Identity Manager

CA RCM and CA Identity Manager use different data models to describe roles, privileges, and resources.

When data is retrieved from CA Identity Manager, most data fields are mapped to obvious parallel fields in the target CA RCM configuration. The following table summarizes exceptions in the default mapping of entities between CA Identity Manager and CA RCM.

CA Identity Manager Entity	Representation in CA RCM
User	User
Provisioning Role	Role
Account Template	Role with a name in one of the following formats: endpoint_type [AT] template_name endpoint_type is the type of endpoint to which the account template belongs. template_name is the account template name [AT] is a text delimiter Example: Windows NT[AT]N16DefaultPolicy
Endpoint capabilities, for example: Active Directory group SAP profile Oracle table privilege	Resource The ResName1 field is mapped to the friendly name 'Display Name'.
Endpoint	An endpoint is mapped to the ResName2 field of the resource, in the format: endpoint_type [EP] endpoint_name endpoint_type is the type of endpoint to which the resource belongs. [EP] is a text delimiter endpoint_name is the endpoint system to which the resource belongs. Example: Windows NT[EP]win_machine_1
User membership in a provisioning role	User-Role link
Provisioning Role Account Template Note: Some role-role links in CA RCM represent nested provisioning roles. These objects are stored in the provisioning directory; however, they are not visible in the Identity Manager User Console. To view nested provisioning roles, use the Provisioning Manager.	Role-Role link
The relationship between a role and a capability on a specific endpoint. In CA Identity Manager, this involves a provisioning role which is associated with an account template that grants capabilities on a specific endpoint.	Role-Resource link
The relationship between a user and a capability	User-Resource link

If you intend to export changes to CA Identity Manager, you can create CA RCM entities that do not export easily. To help ensure that your CA RCM configuration maps smoothly to CA Identity Manager data entities, verify the following:

Provisioning roles have a Type value of Role.
Only provisioning roles have user-role links. Other types of roles do not link to users.
Account templates have a Type value of Policy. Follow the naming conventions of the mapping file for account template entities.
Only account templates have role-resource links. Other roles do not link directly to resources.
Role-role links have no account template that is a parent to a provisioning role.

Email CA Technologies about this topic